F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

i
Contents
Configuring GRE ·························································································································································· 1
Overview ············································································································································································ 1
GRE encapsulation format ······································································································································· 1
GRE encapsulation and de-encapsulation ············································································································· 2
GRE security features ··············································································································································· 2
GRE application scenarios ······································································································································ 3
Protocols and standards ·········································································································································· 4
Configuring a GRE over IPv4 tunnel in the Web interface ··························································································· 4
Configuration prerequisites ····································································································································· 4
Recommended configuration procedure ················································································································ 5
Creating a GRE over IPv4 tunnel interface ············································································································ 5
GRE over IPv4 tunnel configuration example ········································································································ 7
Configuring a GRE tunnel at the CLI ···························································································································· 10
Configuring a GRE over IPv4 tunnel ··················································································································· 10
Configuring a GRE over IPv6 tunnel ··················································································································· 12
Displaying GRE······················································································································································ 14
GRE over IPv4 tunnel configuration examplel ···································································································· 15
GRE over IPv6 tunnel configuration example ····································································································· 17
Troubleshooting GRE ····················································································································································· 20
Configuring a point-to-multipoint GRE tunnel ··········································································································· 22
Feature and hardware compatibility ···························································································································· 22
Overview ········································································································································································· 22
How a P2MP GRE tunnel operates ······················································································································ 23
GRE tunnel backup at a branch ··························································································································· 24
GRE tunnel backup at the headquarters ············································································································· 24
Advantages and restrictions of the P2MP GRE tunnel technology ··································································· 25
Configuring a P2MP GRE tunnel in the Web interface ······························································································ 26
Configuration prerequisites ·································································································································· 26
Recommended configuration procedure ············································································································· 26
Configuring a P2MP GRE tunnel interface ········································································································· 26
Displaying information about established P2MP GRE tunnels·········································································· 28
Basic P2MP GRE tunnel configuration example ································································································· 29
Configuration example for P2MP GRE tunnel backup at the headquarters ···················································· 33
Configuration example for P2MP GRE tunnel backup at a branch ································································· 42
Configuring a P2MP GRE tunnel at the CLI ················································································································· 49
Configuring a P2MP GRE tunnel ························································································································· 49
Displaying and maintaining P2MP GRE tunnels ································································································ 51
Basic P2MP GRE tunnel configuration example ································································································· 51
Configuration example for backing up a P2MP GRE tunnel at the headquarters ········································· 53
Configuration example for backing up a P2MP GRE tunnel at a branch ······················································· 57
Configuring tunneling ················································································································································ 60
Overview ········································································································································································· 60
IPv6 over IPv4 tunneling ······································································································································· 60
IPv4 over IPv4 tunneling ······································································································································· 63
IPv4 over IPv6 tunneling ······································································································································· 64
IPv6 over IPv6 tunneling ······································································································································· 67
Protocols and standards ······································································································································· 68
Tunneling configuration task list ··································································································································· 69